The U.S. Department of Health and Human Services (HHS) launched an investigation into Manasa Health Center LLC’s (Mansa) compliance with the The Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy Rule and notified them about it on November 18, 2020. Manasa is a psychiatric practice based in Kendall Park, New Jersey. As a covered entity under HIPAA, Manasa is required to comply with these rules.

The investigation uncovered certain conduct, referred to as “Covered Conduct,” which includes the illegal disclosure of four patients’ protected health information (PHI) in response to negative reviews on Google. Additionally, Manasa was found to have failed in implementing policies and procedures regarding PHI that comply with the standards and requirements of the Privacy and Breach Notification Rules.

Manasa has agreed to pay HHS a resolution amount of $30,000. The payment will be made on the effective date of the agreement, following written instructions provided by HHS. Manasa has also committed to complying with a Corrective Action Plan (CAP) that serves as a roadmap for Manasa to rectify its non-HIPAA-compliant practices. The CAP put in place includes implementation of compliance policies and procedures, employee trainings, breach notifications, reports.

Abyde’s HIPAA Compliance Software Solution can help healthcare providers effortlessly assess risks, implement necessary policies and procedures, and receive continuous support to maintain compliance with HIPAA regulations. If you have staff that has a bad case of keyboard-itis, make sure they are trained on what NOT to type out on the internet! 

By utilizing Abyde, healthcare providers can rest assured that they are meeting the requirements of the Privacy, Security, and Breach Notification Rules. This proactive approach to compliance helps them avoid the potential consequences of non-compliance, such as costly settlements like the one experienced by Manasa Health Center.